Wireless Lan (WiFi) - eduroam

TU Dresden takes part in the DFN roaming project (DFN = Deutsches ForschungsNetz; internet provider for universities in Germany). Thus employees, students and especially guests, whose universities also participate in DFNRoaming, can get access to the Wireless LAN of TU Dresden. Conversely, if you are at one of these locations , you can also use the wireless LAN there. From a technical point of view this is realized with IEEE 802.1x and distributed RADIUS servers. Network name/SSID is always eduroam.

Setting up eduroam on mobile devices

1. Setting a Wi-Fi password

First, we suggest you set an extra service password for WLAN. Advantage is that you can store this password on your mobile device without compromising the security of the other services.

2. Notes on some operating systems and devices

• iOS users who have already used eduroam are recommended to follow these instructions  Attention: iOS14 has a bug, Apple knows about it, so the configuration of the WLAN with profiles does not work anymore, please use the WLAN VPN/WEB until a fix from Apple
• Required for Android devices only: Install and run eduroam CAT App (available from the Google Play Store or directly from the CAT-Website). The app is are provided by Géant, initiator of the eduroam project. Further information on that subject can be found at the Géant website.
• Linux users need python3 and the package python3-dbus (for Debian derivatives, Fedora) or python3-dbus-python (OpenSUSE).
• Windows-Mobile: Only manual setup possible.

3. eduroam Configuration Assistant Tool (CAT)

ZIH recommends the configuration wizards provided by DFN-Verein for setting up eduroam on mobile devices.

• The profiles for the individual platforms are available at https://cat.eduroam.de/?idp=258.

• The installer for the operating system of the device is pre-selected (in the Windows 10 screenshot).

• Download installer or configuration file and execute (Linux: Installation with command python3 eduroam-linux-TUD.py).

Confirm by clicking onto Yes / Ja when asked for installation of the new root certificate.

• Enter access data: username (<ZIH-Login>@tu-dresden.de) and service password
• If the connection is not established automatically, please connect to the WLAN eduroam and enter the access data as described.

Why using CAT?

• Only the tool can ensure that eduroam is fully configured correctly and can be used at all participating sites.
• CAT protects against attacks by third parties who provide an "eduroam Access Point" to access your user data (login and password).

Setup with CAT does not work

Sometimes it is not possible to register at eduroam WLAN after a seemingly successful new setup. In this case, delete the network profile and set up Eduroam manually.

Manual Setup

In those exceptions where you cannot install the CAT-tool you can configure the connection manually. These are the parameters you need to use:

• Encryption:  WPA2/AES
• EAP-Type: EAP-TTLS
• Anonymous identity: anonymous@tu-dresden.de
• CA-Zertifikat: T-TeleSec GlobalRoot Class 2
• Method of authentification: PAP
• Username: <ZIH-Login>@tu-dresden.de
• Password: <ZIH-WLAN-Password>
• IP-Allocation: automatically done by the DHCP